103.90.25.42 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
103.90.251.53	attackbots	Apr 9 11:39:16 rudra sshd[842588]: Invalid user ubuntu from 103.90.251.53 Apr 9 11:39:16 rudra sshd[842588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.90.251.53 Apr 9 11:39:18 rudra sshd[842588]: Failed password for invalid user ubuntu from 103.90.251.53 port 48662 ssh2 Apr 9 11:39:18 rudra sshd[842588]: Received disconnect from 103.90.251.53: 11: Bye Bye [preauth] Apr 9 11:44:00 rudra sshd[843419]: Invalid user sshvpn from 103.90.251.53 Apr 9 11:44:00 rudra sshd[843419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.90.251.53 Apr 9 11:44:02 rudra sshd[843419]: Failed password for invalid user sshvpn from 103.90.251.53 port 60152 ssh2 Apr 9 11:44:02 rudra sshd[843419]: Received disconnect from 103.90.251.53: 11: Bye Bye [preauth] Apr 9 11:47:40 rudra sshd[844277]: Invalid user ftpuser from 103.90.251.53 Apr 9 11:47:40 rudra sshd[844277]: pam_unix(sshd:auth): authe........ -------------------------------	2020-04-10 04:44:53

类型

评论内容

时间

103.90.251.53

attackbots

Apr  9 11:39:16 rudra sshd[842588]: Invalid user ubuntu from 103.90.251.53
Apr  9 11:39:16 rudra sshd[842588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.90.251.53 
Apr  9 11:39:18 rudra sshd[842588]: Failed password for invalid user ubuntu from 103.90.251.53 port 48662 ssh2
Apr  9 11:39:18 rudra sshd[842588]: Received disconnect from 103.90.251.53: 11: Bye Bye [preauth]
Apr  9 11:44:00 rudra sshd[843419]: Invalid user sshvpn from 103.90.251.53
Apr  9 11:44:00 rudra sshd[843419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.90.251.53 
Apr  9 11:44:02 rudra sshd[843419]: Failed password for invalid user sshvpn from 103.90.251.53 port 60152 ssh2
Apr  9 11:44:02 rudra sshd[843419]: Received disconnect from 103.90.251.53: 11: Bye Bye [preauth]
Apr  9 11:47:40 rudra sshd[844277]: Invalid user ftpuser from 103.90.251.53
Apr  9 11:47:40 rudra sshd[844277]: pam_unix(sshd:auth): authe........
-------------------------------

2020-04-10 04:44:53

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.90.25.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47083
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.90.25.42.			IN	A

;; AUTHORITY SECTION:
.			331	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 26 00:32:30 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

42.25.90.103.in-addr.arpa domain name pointer ip-arana.net.id.as63497.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
42.25.90.103.in-addr.arpa	name = ip-arana.net.id.as63497.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
112.85.42.173	attackbotsspam	Jan 29 16:21:29 host sshd\[11675\]: Unable to negotiate with 112.85.42.173 port 44396: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 \[preauth\] ...	2020-01-29 23:36:02
34.68.49.140	attackspam	Unauthorized connection attempt detected from IP address 34.68.49.140 to port 2220 [J]	2020-01-29 23:34:34
200.56.62.240	attack	2019-04-09 06:39:19 H=\(aol-dial-200-56-62-240.zone-0.ip.static-ftth.axtel.net.mx\) \[200.56.62.240\]:35790 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-04-09 06:40:04 H=\(aol-dial-200-56-62-240.zone-0.ip.static-ftth.axtel.net.mx\) \[200.56.62.240\]:36117 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-04-09 06:40:35 H=\(aol-dial-200-56-62-240.zone-0.ip.static-ftth.axtel.net.mx\) \[200.56.62.240\]:36321 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-01-29 23:57:33
221.143.48.143	attack	Jan 29 04:43:38 eddieflores sshd\[30976\]: Invalid user kasturi from 221.143.48.143 Jan 29 04:43:38 eddieflores sshd\[30976\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.143.48.143 Jan 29 04:43:40 eddieflores sshd\[30976\]: Failed password for invalid user kasturi from 221.143.48.143 port 15766 ssh2 Jan 29 04:47:12 eddieflores sshd\[31497\]: Invalid user akul from 221.143.48.143 Jan 29 04:47:12 eddieflores sshd\[31497\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.143.48.143	2020-01-29 23:13:09
181.171.75.251	attackbotsspam	Lines containing failures of 181.171.75.251 Jan 27 01:26:08 kmh-vmh-001-fsn05 sshd[5086]: Invalid user allan from 181.171.75.251 port 42774 Jan 27 01:26:08 kmh-vmh-001-fsn05 sshd[5086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.171.75.251 Jan 27 01:26:10 kmh-vmh-001-fsn05 sshd[5086]: Failed password for invalid user allan from 181.171.75.251 port 42774 ssh2 Jan 27 01:26:11 kmh-vmh-001-fsn05 sshd[5086]: Received disconnect from 181.171.75.251 port 42774:11: Bye Bye [preauth] Jan 27 01:26:11 kmh-vmh-001-fsn05 sshd[5086]: Disconnected from invalid user allan 181.171.75.251 port 42774 [preauth] Jan 27 01:28:19 kmh-vmh-001-fsn05 sshd[5434]: Invalid user rasa from 181.171.75.251 port 49708 Jan 27 01:28:19 kmh-vmh-001-fsn05 sshd[5434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.171.75.251 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=181.171.75.251	2020-01-29 23:37:48
89.248.162.136	attackbots	01/29/2020-16:27:51.931579 89.248.162.136 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 99	2020-01-29 23:38:03
3.126.130.102	attackbots	W 31101,/var/log/nginx/access.log,-,-	2020-01-29 23:47:48
84.93.153.9	attackbotsspam	Jan 29 16:23:24 vpn01 sshd[2643]: Failed password for www-data from 84.93.153.9 port 58358 ssh2 Jan 29 16:26:49 vpn01 sshd[2668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.93.153.9 ...	2020-01-29 23:36:20
200.7.90.152	attackbotsspam	2019-07-08 14:36:13 1hkSsO-00080V-KV SMTP connection from \(\[200.7.90.152\]\) \[200.7.90.152\]:21452 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-08 14:36:22 1hkSsX-00080e-1p SMTP connection from \(\[200.7.90.152\]\) \[200.7.90.152\]:36968 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-08 14:36:31 1hkSsg-00080p-7G SMTP connection from \(\[200.7.90.152\]\) \[200.7.90.152\]:21572 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-01-29 23:33:39
222.186.180.9	attackbotsspam	SSH Login Bruteforce	2020-01-30 00:07:29
129.126.68.238	attackspambots	01/29/2020-14:34:26.737040 129.126.68.238 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2020-01-29 23:38:58
200.56.122.102	attackbotsspam	2019-05-13 23:08:31 H=\(static-200-56-122-102.alestra.net.mx\) \[200.56.122.102\]:21624 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-05-13 23:08:44 H=\(static-200-56-122-102.alestra.net.mx\) \[200.56.122.102\]:21745 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-05-13 23:08:55 H=\(static-200-56-122-102.alestra.net.mx\) \[200.56.122.102\]:21846 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-01-29 23:58:33
185.234.217.194	attackbots	Jan 29 14:32:08 mail postfix/smtpd[25950]: warning: unknown[185.234.217.194]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 29 14:32:14 mail postfix/smtpd[25950]: warning: unknown[185.234.217.194]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 29 14:32:24 mail postfix/smtpd[25950]: warning: unknown[185.234.217.194]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-01-29 23:37:13
90.143.21.17	attackbotsspam	20/1/29@08:34:10: FAIL: Alarm-Network address from=90.143.21.17 ...	2020-01-30 00:04:10
104.206.128.74	attackbotsspam	Unauthorized connection attempt detected from IP address 104.206.128.74 to port 3306 [J]	2020-01-29 23:20:33

最近上报的IP列表

103.90.33.101	103.90.33.10	51.44.41.164	103.90.33.103
103.90.33.104	103.90.33.110	103.90.33.116	9.38.152.216
103.90.33.119	103.90.33.123	103.90.33.112	103.90.33.114
103.90.33.106	103.90.33.124	103.90.33.121	103.90.33.14
103.90.33.126	103.2.146.181	103.90.33.17	103.90.33.18